Claims 

1 . A method for reviewing a business process, comprising the step of: 

providing a business process; 

identifying risks in the business process as control points; and 
arranging information pertaining to the control points in a template. 

2. The method of claim 1, further comprising the steps of: 

identifying actions to address the risks; 

arranging the identified actions in the template; and 

performing an audit using the template. 

3. The method of claim 1, wherein the step of identifying risks comprises the step 
of implementing a set of tests to identify risks in the business process. 

4. The method of claim 1, wherein the information comprises: 

a set of tests, wherein the set of tests identify risks in the business process; 

and 

a set of actions, wherein the set of actions address the risks. 

5. The method of claim 4, wherein the information further comprises: 

a business process; 
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a test entity, wherein the test entity performs the set of tests; 

an action entity, wherein the action entity performs the set of actions; and 

audit details. 

6. The method of claim 5, wherein the information further comprises: 
a control point name; 
control point revisions; 
background information; and 
a control point frequency. 
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7. A method for reviewing a business process, comprising the steps of: 

providing a business process; 

implementing a set of tests to identify risks in the business process as 
control points; 

identifying a set of actions to address the identified risks; and 
arranging the set of tests and the identified actions in a template. 

8. The method of claim 7, wherein the set of tests and the set of actions comprise 
control point information, 

9. The method of claim 7, further comprising the steps of: 

storing the template; and 

accessing the stored template to perform an audit. 
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10. A method for reviewing a business process, comprising the steps of: 

providing a business process; 

implementing a set of tests to identify risks in the business process as 
control points; 

identifying a set of actions to address the identified risks; 

arranging the business process, the set of tests, and the identified actions in 
a template; and 

auditing the control points based on the template. 

1 1. The method of claim 10, wherein the implementing step comprises the step of 
examining steps in the business process to identify risks. 
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12. A method for arranging business process control point information in a 
template, comprising the steps of: 

arranging a set of tests in a test field, wherein the set of tests identifies 
risks in a business process; and 

arranging a set of actions in an action field, wherein the set of actions 
addresses the identified risks. 

13. The method of claim 12, further comprising the steps of: 

arranging a business process in a business process field; 

arranging a test entity in a test execution field, wherein the test entity 
performs the set of tests; 

arranging an action entity in an action execution field, wherein the action 
entity performs the set of actions; and 

arranging audit details in an audit field. 

14. The method of claim 13, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 
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15. The method of claim 12, further comprising the steps of: 
storing the template; and 
performing an audit based on the stored template. 
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16. A method for arranging business process control point information in a 
template, comprising the steps of: 

arranging a business process in a business process field; 

arranging a set of tests in a test field, wherein the set of tests identifies 
risks in the business process; and 

arranging a set of actions in an action field, wherein the set of actions 
addresses the identified risks. 

17. The method of claim 16, further comprising the steps of: 

arranging a test entity in a test execution field, wherein the test entity 
performs the set of tests; 

arranging an action entity in an action execution field, wherein the action 
entity performs the set of actions; and 

arranging audit details in an audit field; 

storing the template; and 

performing an audit based on the stored template. 
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18. The method of claim 17, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 
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1 1 9. A template for arranging business process control point information, 

2 comprising: 

3 a test field for arranging a set of tests, wherein the set of tests identifies 

4 risks in a business process; and 

5 an action field for arranging a set of actions, wherein the set of actions 

6 addresses the identified risks. 

1 J 20. The template of claim 1 9, further comprising: 

2i: a business process field for arranging a business process; 

3 5 ^ a test execution field for arranging a test entity, wherein the test entity 

4^ performs the set of tests; 

S£ an action execution field for arranging an action entity, wherein the action 

dM : - entity performs the set of actions; and 

7 an audit field for arranging audit details. 

1 21 . The template of claim 20, further comprising: 

2 a name field for arranging a control point name; 

3 a revision field for arranging control point revisions; 

4 an information field for arranging background information; and 

5 an interval field for arranging a control point frequency. 
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22. The template of claim 19, wherein the risks comprise control points, and 
wherein the set of tests and the set of actions comprise control point information. 
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23. A template for arranging business process control point information, 
comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests, wherein the set of tests identifies 

risks in the business process; and 

an action field for arranging a set of actions, wherein the set of actions 
addresses the identified risks. 

24. The template of claim 23, further comprising: 

a test execution field for arranging a test entity, wherein the test entity 
performs the set of tests; 

an action execution field for arranging an action entity, wherein the action 
entity performs the set of actions; and 

an audit field for arranging audit details. 

25. The template of claim 24, further comprising: 

a name field for arranging a control point name; 

a revision field for arranging control point revisions; 

an information field for arranging background information; and 

an interval field for arranging a control point frequency. 
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26. A template for arranging business process control point information, 
comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests, wherein the set of tests identifies 
risks in the business process steps; 

an action field for arranging a set of actions, wherein the set of actions 
addresses the identified risks; 

a test execution field for arranging a test entity, wherein the test entity 
performs the set of tests; 

an action execution field for arranging an action entity, wherein the action 
entity performs the set of actions; and 

an audit field for arranging audit details. 

27. The template of claim 26, further comprising: 

a name field for arranging a control point name; 

a revision field for arranging control point revisions; 

an information field for arranging background information; and 

an interval field for arranging a control point frequency. 
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1 28. A program product stored on a recordable medium for arranging business 

2 process control point information in a template, comprising: 

3 an interface for receiving business process control point information; 

4 a template for arranging the received information, wherein the template 

5 comprises: 

6 a test field for arranging a set of tests, wherein the set of tests 
7"!;. identifies risks in a business process; and 

8 an action field for arranging a set of actions, wherein the set of 

9:S actions addresses the identified risks. 

ltj' 29. The program product of claim 28, wherein the template further comprises: 

2,f ; a business process field for arranging a business process; 

3M ; a test execution field for arranging a test entity, wherein the test entity 

4 performs the set of tests; 

5 an action execution field for arranging action entities, wherein the action 

6 entity performs the set of actions; and 

7 an audit field for arranging audit details. 
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1 30. The program product of claim 29, wherein the template further comprises: 

2 a name field for arranging a control point name; 

3 a revision field for arranging control point revisions; 

4 an information field for arranging background information; and 

5 an interval field for arranging a control point frequency. 
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